Thanks guys. That article was scary reading. Very familiar and even some of the table names mentioned are the same as the ones the devs have deployed.
I really need to understand the application more before coming up with a solution, but I am glad others agree that the current deployment is completely not right!
Thanks.